CVEvulnerability

CVE-2022-40136

4.4 MEDIUM Published 2023-01-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-01-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-125

Description

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Affected configurations

• lenovo ideacentre c5-14imb05 firmware (< o4hkt38a) • lenovo thinkcentre e96z firmware (< m26kt22a) • lenovo ideacentre 3 07iab7 firmware (< m49kt1da) • lenovo ideacentre 3-07imb05 firmware (< m2vkt1da) • lenovo ideacentre 5 14iab7 firmware (< m42kt40a) • lenovo ideacentre 5-14acn6 firmware (< o5ekt21a) • lenovo ideacentre 5-14imb05 firmware (< o4hkt38a) • lenovo ideacentre 5-14iob6 firmware (< m3gkt33a) • lenovo ideacentre creator 5-14iob6 firmware (<= m3gkt33a) • lenovo ideacentre g5-14imb05 firmware (< o4hkt38a) • lenovo ideacentre gaming 5 17acn7 firmware (< o5ekt21a) • lenovo ideacentre gaming 5 17iab7 firmware (< m42kt40a) • lenovo ideacentre gaming 5-14acn6 firmware (< o5ekt21a) • lenovo ideacentre gaming 5-14iob6 firmware (< m3gkt33a) • lenovo legion c530-19icb firmware (< o4bkt20a) • lenovo legion t5-26iob6 firmware (< o54kt1da) • lenovo legion t5-28icb05 firmware (< o4bkt20a) • lenovo legion t530-28apr firmware (< o4gkt16a) • lenovo legion t530-28icb firmware (< o4bkt20a) • lenovo legion t7-34imz5 firmware (< o4lkt1ea) • lenovo thinkcentre m70q gen 2 firmware (< m2wkt57a) • lenovo thinkcentre m710t firmware (< m16kt68a) • lenovo thinkcentre m60e tiny firmware (< m3skt21a) • lenovo thinkcentre m625q firmware (< m1wkt45a) • lenovo thinkcentre m630e firmware (< m28kt37a) • lenovo thinkcentre m70a firmware (< m2skt25a) • lenovo thinkcentre m70a gen 2 firmware (< m3nkt20a) • lenovo thinkcentre m70c firmware (< m2vkt1da) • lenovo thinkcentre m70q firmware (< m2wkt57a) • lenovo thinkcentre m70q gen 3 firmware (< m43kt16a) • lenovo thinkcentre m70s gen 3 firmware (< m41kt2da) • lenovo thinkcentre m70t gen 3 firmware (< m41kt2da) • lenovo thinkcentre m710e firmware (< m1zkt38a) • lenovo thinkcentre m710q firmware (< m1akt56a) • lenovo thinkcentre m710s firmware (< m16kt68a) • lenovo thinkcentre m715q firmware (< m11kt54a) • lenovo thinkcentre m715t firmware (< m2ckt4da) • lenovo thinkcentre m720e firmware (< m30kt26a) • lenovo thinkcentre m720q firmware (< m1ukt67a) • lenovo thinkcentre m720s firmware (< m1ukt67a) • lenovo thinkcentre m720t firmware (< m1ukt67a) • lenovo thinkcentre m725s firmware (< m25kt61a) • lenovo thinkcentre m75n firmware (< m33kt25a) • lenovo thinkcentre m75q gen 2 firmware (< m47kt24a) • lenovo thinkcentre m75q-1 firmware (< m2fkt2da) • lenovo thinkcentre m75s gen 2 firmware (< m46kt2da) • lenovo thinkcentre m75s-1 firmware (< m2ckt4da) • lenovo thinkcentre m75t gen 2 firmware (< m46kt2da) • lenovo thinkcentre m80q firmware (< m2wkt57a) • lenovo thinkcentre m810z firmware (< m1ckt49a) • lenovo thinkcentre m818z firmware (< m1ekt25a) • lenovo thinkcentre m820z firmware (< m1nkt58a) • lenovo thinkcentre m90a firmware (< m2rkt52a) • lenovo thinkcentre m90a gen2 firmware (< m3lkt26a) • lenovo thinkcentre m90q gen 2 firmware (< m3jkt34a) • lenovo thinkcentre m90q tiny firmware (< m2wkt57a) • lenovo thinkcentre m910q firmware (< m1akt56a) • lenovo thinkcentre m910s firmware (< m1akt56a) • lenovo thinkcentre m910t firmware (< m1akt56a) • lenovo thinkcentre m910x firmware (< m1akt56a) … and 89 more

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References